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(54) Method for controlling the use of a program signal in a broadcast system, and control device 
for a receiver for carrying out such a method 



(57) In a method for controlling the use of a program 
signal in a broadcast system, comprising one or more 
broadcasters and a number of receivers, at least a part 
of the receivers can be provided with a storage medium 
for storing program signals. The program signal com- 
prises content signals of a first and a second type, 
wherein the second type of content signals is inserted 
in time slots in the first type of content signals. At least 
the first type of content signals is scrambled using con- 
trol words as scrambling keys to obtain a scrambled pro- 
gram signal. The program signal is scrambled using 



control words as scrambling keys and the scrambled 
program signal is broadcasted together with entitlement 
control messages (ECM's) containing the control words 
in an encrypted manner using a second key. Decrypting 
means are provided at each receiver for retrieving the 
control words from the ECM's by decrypting the ECM's, 
wherein the control words are delivered by the decrypt- 
ing meansfor descrambling the program signal. At least 
a plurality of ECM's comprises control information to 
control the decrypting means in such a manner that at 
least the time slots for second type of content signals 
are maintained in the first type of content signals. 
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Description 

[0001] The invention relates to a method for control- 
ling the use of a program signal in a broadcast system, 
comprising one or more broadcasters and a number of 
receivers, at least a part of the receivers preferably hav- 
ing a storage medium for storing program signals, 
wherein the program signal comprises content signals 
of a first and a second type, wherein at least the first 
type of content signals is scrambled using control words 
as scrambling keys to obtain a scrambled program sig- 
nal and wherein the scrambled program signal is broad- 
casted together with entitlement control messages 
(ECM's) containing the control words in an encrypted 
manner using a second key, wherein decrypting means 
are provided at each receiver for retrieving the control 
words from the ECM's by decrypting the ECM's, and 
wherein the control words are delivered by the decrypt- 
ing means for descrambling the program signal. The in- 
vention further relates to a control device for a receiver 
for carrying out such a method, comprising decrypting 
means for retrieving the control words from ECM's by 
decrypting the ECM's, and for delivering decrypted con- 
trol words for descrambling a program signal. 
[0002] Recently audio/video devices has become 
available, wherein the device is provided with a storage 
medium having sufficient storage capacity to store 
hours of audio/video programs. With such audio/video 
devices it is possible to use a remote editing agent in 
the receiver to construct a broadcasting station within 
the device. The remote editing agent causes video and/ 
or audio clips to be presented to the viewer in a contin- 
uous sequence simulating a broadcast service. The se- 
quence can be determined by direct user interaction, us- 
er settings or intelligent analysis within the receiver of 
the user's behaviour. 

[0003] In many cases, a program signal includes both 
content signals (or more generally content signals of a 
first type) and advertisement signals (or more generally 
content signals of a second type), wherein selling ad- 
vertisement time slots in the complete program is an im- 
portant income source of the broadcaster. With the 
availability of audio/video devices of the above-men- 
tioned type, the remote editing agent can use the user 
interaction/profile to select which advertisements 
should be inserted in the advertisement slots in the pro- 
gram signal. In this manner a broadcaster can resell the 
same advertisement slots to many advertisers and the 
advertisements can be better targeted to the viewers. 
This way of tuning advertisement slots to the viewer re- 
quires to add data to the program signal with flags indi- 
cating the insertion points to insert advertisements in the 
advertisement slots and data describing the type of ad- 
vertisements and programs, respectively. However a 
program signal with flags to indicate the advertisement 
slots is open to use by unauthorized third parties which 
can reprogram the receivers to use the program signal 
provided by the broadcaster to insert their own adver- 



tisements or to remove the advertisement slots com- 
pletely. 

[0004] The invention aims to provide a method of the 
above-mentioned type, wherein unauthorized use of a 

5 program signal is prevented in an efficient manner. 
[0005] According to the method of the invention at 
least a plurality of ECM's comprises control information 
to control the decrypting means in such a manner that 
at least the time slots for second type of content signals 

10 are maintained in the first type of content signals. 

[0006] In this manner a method is obtained, wherein 
unauthorised use of the program signal is prevented, 
because the decrypted ECM's provided by the broad- 
caster provide control on the use of the signal, in partic- 

15 ular on maintaining the time slots in the first type of con- 
tent signal. 

[0007] Preferably the ECM's comprise first ECM's for 
the first type of content signals and second ECM's for 
the second type of content signals, wherein at least a 
20 plurality of first and second ECM's is provided with con- 
trol information, wherein the decrypting means checks 
the control information and delivers decrypted control 
words of the first or second ECM's in accordance with 
the control information to descramble content signals of 
the first or second type, respectively 
[0008] The invention further provides a control device 
of the above-mentioned type characterized in that the 
decrypting means is adapted to check the control infor- 
mation of the decrypted ECM's and to insert a time slot 
in the first type of content signals as indicated by the 
control information. 

[0009] The invention will be further explained by ref- 
erence to the drawings, in which an embodiment of the 
method and control device of the invention are shown 
by way of example. 

[0010] Fig. 1 shows in a very schematic manner an 
embodiment of a control device of the invention. 
[001 1 ] Fig. 2 shows a flow diagram to explain an em- 
bodiment of the method of the invention. 
[0012] Fig. 3 shows a flow diagram to explain a sec- 
ond embodiment of the method of the invention. 
[0013] It is noted that in the following examples the 
insertion of advertisements into a content signal, such 
as a show or a film, is described. However the invention 
generally relates to a method for controlling the use of 
a program signal, wherein the program signal comprises 
a first type of content signals, i.e. the show or film or the 
like, and a second type of content signals, for example 
advertisement signals, wherein the second type of con- 
tent signals can be inserted into the first type of content 
signals under the control of the broadcaster. 
[0014] In the method described the program signal 
that is broadcasted is scrambled irrespective whether it 
is a pay service or a service based upon advertisement 
as source of income. The scrambling is carried out in a 
usual manner according to a conditional access system 
with a key hierarchy. It is noted that the structure of the 
conditional access system and the descrambling/en- 



30 



35 



40 



45 



50 



2 



BNSDCCID: <EP 



1111924A1J_> 



3 EP1 111 924A1 4 



cryption techniques used are not part of the present in- 
vention. According to the invention, the conditional ac- 
cess system is used to manage the insertion of the ad- 
vertisements into the program signal. 
[0015] The control device shown in fig. 1 is adapted 
to operate according to a conditional access system, 
wherein so-called entitlement control messages or 
ECM's are broadcasted together with the program sig- 
nal, wherein the ECM's comprise the control words or 
first keys which are used to scramble the clear program 
signal. The control words are encrypted using a second 
key which is available in the control device, in case of 
the embodiment shown in fig. 1 in a smart card 1 . The 
smart card 1 decrypts the ECM's to provide the clear 
control words to a unit 2fordescramblingthe scrambled 
content signal. The output of the unit 2 provides the clear 
audio/video signals. The input to the descrambling unit 
2 may be a compressed signal, in which case the unit 2 
also operates to decompress the signal. The input sig- 
nals can be retrieved from a storage medium 3, for ex- 
ample a hard disk with large capacity, or directly from a 
demodulator/demultiplexer 4. The signals stored on the 
storage medium 3 may come from the demodulator/de- 
multiplexer 4. This part of the control device is not part 
of the present invention and will therefore not be de- 
scribed further. 

[0016] Both the content program signal and the ad- 
vertisement signal have their corresponding ECM's in- 
serted, i.e. content or first ECM's and advert or second 
ECM's, respectively. Although in this embodiment the 
advertisement signal is scrambled with advert ECM's, 
the advertisement signal may be sent in the clear or 
scrambled using the control word of the last content 
ECM. This means that it is also possible to use only one 
type of ECM's. 

[0017] As the program signal is played back the ap- 
propriate ECM's are sent to the smart card and these 
ECM's are used to control the use of the complete pro- 
gram signal. To this end, the content ECM's may carry 
control information including a content sequence iden- 
tifier. This control information can include information on 
the content and rules for insertion of the advertisement 
signals into the content. These rules may for example 
indicate specific advertisements which should be insert- 
ed into the specific content signal, for example in case 
the broadcaster has sold advertisement slots in specific 
films, shows or the like. It will be clear to the skilled per- 
son that the storage medium 3 will have stored several 
types of advertisement signals, so that different control 
devices according to fig. 1 can insert different advertise- 
ments depending on user settings or analysis of user 
behaviour. A further possibility as a rule for insertion of 
different advertisements is insertion in dependence of 
the time of the day. 

[0018] The ECM's of the advertisement signals also 
may carry control information including a sequence 
identifier. The control information may include informa- 
tion identifying the advertising material, information 



specifying how many advert ECM's there are in the se- 
quence of ECM's that delivers control words for one ad- 
vertisement and the order of ECM's. Typically, a condi- 
tional access system changes the control word every 
5 few seconds so that with an advertising slot of for ex- 
ample 30 seconds, there may be several ECM's per ad- 
vertising slot. 

[0019] The control information may further include 
timing information specifying a delay between ECM's. 
io in this manner fast forwarding of the advertisements or 
submission of advert ECM's without actually processing 
the content can be prevented. The smart card 1 is pro- 
vided with a real time clock and checks the delay spec- 
ified by the ECM and if this delay has not passed, the 
'5 smart card 1 does not accept the next or any other ECM 
in the sequence before the delay has actually passed. 
In this manner the advertising slot is enforced during the 
playback of the program signal. 

[0020] It is noted that at least a part of the content 
ECM's may also include timing information in the control 
information, in particular in ECM's just before and after 
an advertisement slot to prevent a start of fast forward- 
ing just before the advertisement slot. The sequence 
identifiers in both types of ECM's are used to signal the 
smart card 1 a jump to a new point in the program signal . 
[0021] According to the method of the invention de- 
scribed various rules for insertion of advertisements can 
be used. 

[0022] In an embodiment wherein only one type of 
ECM's are used, the decryption of an ECM can be made 
dependent on the decryption of a previous ECM. For ex- 
ample by using the sequence identifier of the ECM's a 
next ECM is only used to obtain the control word if the 
previous ECM has indeed been used. Skipping a part 
of the program, in particular the time slot for advertise- 
ments is prevented in this manner. As an alternative the 
same result can be obtained by providing timing indices 
within one type of ECM's. The timing information in the 
ECM's will enforce a break in the normal program for 
insertion of the adverts. 

[0023] Fig. 2 shows an embodiment wherein timing is 
used to insert the advertisements into the content pro- 
gram signal. By way of example a slot of one minute of 
advertisement could be inserted into each five minutes 
of program content. To this end the control information 
of the content ECM's carry information to count down 
until the advertisement insertion slot. In the flow diagram 
shown in fig. 2, each ECM extracted from the program 
signal is checked by the smart card on timing informa- 
tion and if the time delay is correct, the ECM is checked 
on whether or not it is an advert ECM. If it is a content 
ECM, the content ECM counter is incremented. De- 
pending on the count of the counter, a flag is set to in- 
dicate that an advert ECM should be extracted in the 
next cycles. After outputting the control word to the de- 
scrambler 2, a next ECM is extracted. If an advert ECM 
is detected by the smart card, a counter for advert ECM's 
is incremented and the output control word is provided 
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to the descrambler 2. When the advertisement slots 
have passed, the ECM flag is reset to content and a next 
content ECM is extracted. If the advertisement slot has 
not yet passed, a next advert ECM is extracted. 
[0024] As an alternative to the operation shown in the 5 
flow diagram of fig. 2, only the last ECM before the ad- 
vertisement insertion point could have an indication to 
instruct the smart card to start an advertisement slot. 
[0025] During processing advert ECM's, the smart 
card 1 ensures by checking the time delay that the delay w 
between ECM's is such that the specified advertisement 
duration is maintained even if the user tries to fast for- 
ward during the advertisement slot. 
[0026] As mentioned above, in this example, the con- 
tent ECM's could contain control information which in- 15 
dicates that only specific advertisements should be in- 
serted into the next advertisement slot. The smart card 
will then only allow corresponding advert ECM's to be 
processed. 

[0027] It is possible that the user of the control device 20 
switches to another channel during the advertisement 
slot. In order to guarantee that the advertisement is 
viewed, the smart card 1 can maintain a log of the pro- 
gram that has been watched by retrieving the program 
signal from the storage medium 3. When the user re- 25 
turns to that channel, the smart card enforces that the 
correct advertisement sequence is watched before the 
next part of program content becomes available. 
[0028] In fig. 3 a flow diagram of a second embodi- 
ment is shown, wherein for both the content ECM's and 30 
the advert ECM's a counter is used, wherein the control 
information of the content ECM's indicates a threshold 
for the amount of viewing of the program content which 
must occur before an advertisement can be inserted. 
Once the threshold, i.e. a minimum amount of viewing 35 
time, has been reached the smart card 1 may be pro- 
grammed such that it waits for an appropriate insertion 
point or immediately stops processing content ECM's 
until a predetermined number of advert ECM's are proc- 
essed. 40 
[0029] In this embodiment the control information of 
the content ECM's may also indicate the appropriate in- 
sertion point for the advertisement slot. In this manner 
the advertisements are not randomly inserted in the mid- 
dle of a scene but only at a scene boundary for example. *s 
Of course, the control information of the content ECM's 
may also indicate a maximum value of program viewing 
time and if exceeded, the smart card 1 does not wait 
until an appropriate insertion point but immediately 
starts to process advert ECM's. so 
[0030] A program signal may include one or more 
ECM's having a decision rule as part of the control in- 
formation, which decision rule provides the user the pos- 
sibility to select a viewing mode with a particular entitle- 
ment to watch the content without advertisement inser- 55 
tion. This particular entitlement may be subscription, 
pay per view or the like. 

[0031] As an alternative it can be guaranteed that an 



advertisement slot is not deleted or skipped by providing 
control information in the last ECM or plurality of ECM's 
before the advertisement slot indicating the rate at which 
ECM's are allowed to be processed or the delay before 
the next ECM is allowed to be processed. For example, 
this control information instructs the control device to 
wait for two minutes before the next ECM can be proc- 
essed. 

[0032] Although in the above embodiments the inven- 
tion is explained when using stored content, the inven- 
tion can be used in the same manner in watching or lis- 
tening normal broadcast signals. The advert ECM's can 
be used to check whether the user has not surfed to an- 
other channel. If the user did surf to another channel 
access to the content of the channel using the described 
control method, can then be denied for a predetermined 
period for example. 

[0033] In the above-described embodiments, a con- 
trol device is used having a hardware smart card for 
processing the ECM's as in a conventional conditional 
access system. According to an embodiment of the in- 
vention described, the function of the smart card regard- 
ing processing of ECM's can be carried out by a software 
module which is executed in a microprocessor of the de- 
scrambler 2. This software module is provided by the 
broadcaster and is downloaded over the air into the de- 
scrambler 2 and can be changed regularly to prevent 
unauthorised persons to reprogram the descrambler 2, 
for example to completely delete the advertisement 
slots or to insert there own advertisements. 
[0034] The invention is not restricted to the above de- 
scribed embodiment and can be varied in a number of 
ways within the scope of the following claims. 

Claims 

1. Method for controlling the use of a program signal 
in a broadcast system, comprising one or more 
broadcasters and a number of receivers, at least a 
part of the receivers preferably having a storage 
medium for storing program signals, wherein the 
program signal comprises content signals of a first 
and a second type, wherein the second type of con- 
tent signals is inserted in time slots in the first type 
of content signals, wherein at least the first type of 
content signals is scrambled using control words as 
scrambling keys to obtain a scrambled program sig- 
nal and wherein the scrambled program signal is 
broadcasted together with entitlement control mes- 
sages (ECM's) containing the control words in an 
encrypted manner using a second key, wherein de- 
crypting means are provided at each receiver for re- 
trieving the control words from the ECM's by de- 
crypting the ECM's, and wherein the control words 
are delivered by the decrypting means for descram- 
bling the program signal, characterized in that at 
least a plurality of ECM's comprises control infor- 
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mation tp control the decrypting means in such a 
manner that at least the time slots for second type 
of content signals are maintained in the first type of 
content signals. 

5 

2. Method according to claim 1 , wherein a real time 
clock is operated at the receiver side, wherein the 
control information of an ECM near the beginning 
of a time slot for the second type of content signals 
indicates a delay before a next ECM can be decrypt- n> 
ed by the decrypting means. 

3. Method according to claim 1, wherein the ECM's 
comprise first ECM's for the first type of content sig- 
nals and second ECM's for the second type of con- 15 
tent signals, wherein at least a plurality of first and 
second ECM's is provided with control information, 
wherein the decrypting means checks the control 
information and delivers decrypted control words of 

the first or second ECM's in accordance with the 20 
control information to descramble content signals 
of the first or second type, respectively. 




924 A1 8 

8. Method according to claim 3 and 7, wherein at least 
a plurality of first ECM's provides control information 
for the decrypting means indicating the decrypting 
means to use a plurality of second ECM's, wherein 
the control information may comprise timing infor- 
mation on the time period for using first ECM's and 
on the time period for using second ECM's, and in- 
formation on the point within the first type of content 
signals for inserting the second type of content sig- 
nals. 

9. Method according to claim 8, wherein the second 
type of content signals comprise content signals 
with corresponding ECM's representing various 
contents, wherein the control information of at least 
a part of said plurality of first ECM's comprises se- 
lection identifiers for allowing only a selected con- 
tent signal with corresponding ECM's to be used for 
insertion into the first type of content signals as sec- 
ond type of content signals, wherein in particular the 
selection identifiers select the content signal de- 
pending on the time of the day. 



4. Method according to claim 3, wherein the control 
information of said plurality of ECM's comprises tim- 
ing information, wherein a real time clock is operat- 
ed at the receiver side, wherein the decrypting 
means checks the timing information of each ECM 
by means of the real time clock and continues to 
deliver control words of the ECM's for descrambling 
the program signal only if the timing information cor- 
responds with the time indication provided by the 
real time clock. 

5. Method according to claim 4, wherein a sequence 
identifier and a minimum delay which should pass 
before a next ECM should be decrypted are added 
to said plurality of ECM's as timing information, 
wherein the decrypting means checks the time 
passed by means of the real time clock and contin- 
ues to deliver a next control word only if the time 
passed corresponds with the minimum delay. 



10. Method according to claim 8 or 9, wherein the dc- 
25 crypting means enforces the receiver to use all sec- 
ond ECM's corresponding to the time period indi- 
cated for using the second ECM's independent of 
the receiver being tuned to the corresponding pro- 
gram signal source. 

30 

11. Method according to any one of the preceding 
claims, wherein the ECM's are inserted in the pro- 
gram signal in synchronisation with the change of 
the control words used to scramble the program sig- 

35 nal. 

12. Method according to any one of the preceding 
claims, wherein the decrypting means is provided 
as a software module broadcasted by a broadcast- 

40 er, wherein the software module is executed in the 
receivers, wherein the software module is regularly 
changed by the broadcaster. 



6. Method according to any one of claims 1 -5, wherein 
the control information of the ECM's comprises a 
sequence identifier including an index number of 
the previous and/or next ECM's, wherein the de- 
crypting means checks the index number of a re- 
ceived ECM against the expected index number, 
wherein the control word is only provided if the index 
number received matches the expected index 
number. 

7. Method according to claim 1 , wherein the control 
information of an ECM comprises information on 
the insertion of the second type of content signals 
in the first type of content signals. 



13. Method according to claim 3, wherein an ECM of 
45 the first ECM's for the first type of content signals 

comprises control information to switch the decrypt- 
ing means to deliver only first ECM's for the first type 
of content signals if the decrypting means indicate 
a viewing mode allowing the use of the first content 
50 signals only. 

14. Control device for a receiver for carrying out the 
method according to any one of the preceding 
claims, comprising decrypting means for retrieving 

55 the control words from ECM's by decrypting the 
ECM's, and for delivering decrypted control words 
descrambling a program signal, characterized in 
that the decrypting means is adapted to check the 
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control information of the decrypted ECM's and to 
insert a time slot in the first type of content signals 
as indicated by the control information. 

15. Control device according to claim 14. wherein the 5 
decrypting means delivers decrypted control words 

of the first or second ECM's in accordance with the 
control information to descramble content signals 
of the first or second type, respectively. 

10 

16. Control device according to claim 14 or 15, further 
comprising a real time clock, wherein the decrypting 
means is adapted to check the timing information in 
the control information of each ECM by means of 

the real time clock and to continue to deliver control 15 
words of the ECM's for descrambling the program 
signal only if the timing information corresponds 
with the time indication provided by the real time 
clock. 
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